<%
	session.setAttribute("account", null);
	response.sendRedirect("login");//invalid
%>